RegSvr32 error

After I attempted to download roguekiller, my antivirus program blocked the attempt with this warning
Not sure why Mcaffee flagged it.

Depends on which D/L you chose Bleep or auther.

Please ignore the warning and run it.

Did those files reappear in progdata??

Roy

The files are still sitting in the trash. I checked the progdata folder and they did not reappear. I douwnloaded it using the green button that says download at authors site. Just curious....

-most of my data is on a second drive, but when I install programs, I always have them install on the c drive.
-Do I need to do these scans on my data drive as well as my c drive? Roughly how long will the scanning process take?

So far I haven't done any scanning yet with any of the 3 things that have been mentioned
1) ccCleaner
2) Eset
3) RogueKiller

Of these 3, which one should I do first? I have some work stuff I need to do, so I can't tie up my computer all day

Hi Harley,
Please scan all drives.

Runnng times
Rogue about 5mins
Ccleaner upto 1/2 hour
Eset 1 hr+

Run in the order above.

Do you have a spare USB/disc if so copy your private data to it and run your AV scanner on it before you copy it back to your comp. (remember to uncheck autoplay).
Roy

A couple of screen caps from the rogue scan .... took about a half hour

The first one shows the file(s) in question.... the area I blacked out had some IP addresses which I thought best not to show.




I haven't actually deleted anything yet, because i wanted to show it to you and get your thoughts

Hi Harley,
Trojans and what they do are over my skill limits.
if you look at this link,http://www.google.co.uk/url?sa=t&rct...,d.dmo&cad=rja
(refers to HiddenAds @ the bleepingcomputers forum), shows as being false/positive, but Rosena is a trojan.
cant remember if youve run Malwarebytes free, either way did you enable the rootkit scan option.

My advice now is to post at BleepingComputers> am i infected subforum, They tend to be very busy be patient.
DO not do anything other than run Malwarebytes.

Roy
might help speed things up abit if you post a link to this thread.

Well good news and bad news

1) good news is the popup regserve error is not showing up anymore

2) bad news... Prior to seeing your #16 post, I took a chance and went ahead and deleted most of those files by checking them and telling rogue to delete. It rebooted and the error message did not show up. I ran the scan again and the few things I left unchecked did come back up (the trojan files did not appear on the second scan) I did the second scan, and once completed it showed that many of those files were deleted, and a few of the files in the registry were changed to ()

But I did not realize that there was a save log option so I never saved any logs on either scan.

Regarding your question on Malwarebytes... I did run a scan prior me posting this issue ( this was done when I was trying to correct the firefox download problem. It did find a bunch of crap, and either quaranteened it or deleted it. But again I didn't save a log. But running this did correct firefox download problem.

I have not run Malwarebytes a second time.

1) So should I rerun malwarebytes and try and save a log somehow and then post that at this other forum?

2) Is there a way of checking what viruses were quaranteened in mcaffee or malwarebytes?

I really want to take a moment to thank you for all your help and timely replies.

Hi Harley,
The logs can be found in the history section settings for Macafee/Malwarebytes.
They will show what it removed and what type of malware it was.
My question re mbytes, was the antirootkit setting checked in your original scan.

At least the pop-up gone.
If it was me i would still post in the BC forum, it certainly wont hurt to get Expert advice.

Roy

Regarding the rootkit question.... I'm going to say no...this is why I say that. I just opened it and there is a big button that says scan.. most likely all I did was press that button and it went thru the process.

But I dug into the settings and saw on default startup the rootkit option is unchecked. So most likely the first scan did not include the rootkit option checked.

1) I'm assuming you feel that I should maybe enable option prior to doing the scan.... is that correct?